Could you please help on this?We have a common control which owned by a Function, added reliant entity as "Internet facing application". Assume 100 entities added.Not the Function entity owner (who is attestation respondent) perform attestation and b...
Hi EveryoneCould someone please help me identify the OOB functionality that is causing the Control State to change to Retired when the Control Objectives are moved to the Inactive state?I have been trying hard to find the OOB logic behind this behavi...
On smart assessment, i have one dependant question which shows dropdown choices, when the question meets condition it is showing dropdown choices, user is able to select the choices but the arrow in dropdown shows red blocked symbol, can we remove th...
The starter stories state 'As a BCM Admin...' which seems to signal the BCM Admin should be creating the data in the configuration tables (element definitions, tiers, etc.) in Dev. It does not seem to indicate the Developer. We are NOT modifying any ...
HiCan anyone please explain the backend functioning of the "assessment responses" in the onboarding of an AI asset that automatically maps the risks accordingly and evaluates the risk score and analysis to consider. Like how we map the responses with...
Hi all, If someone is viewing a Risk Event case in the Compliance Workspace and shares the link, the recipient can't open it if they don't have access to Compliance Workspace. Even though it's the same record, they'd normally view it in the Risk Wor...
My clients are interested in configuring the Personal Data Rights plugin for Privacy Management, in large part due to the external facing form that comes with the plug-in. They are on the Zurich release, and according to the product documentation - t...
When clicking on the pie chart(red or green) in the 'Entities' report on the homepage of the Compliance Workspace, users are seeing a blank list, despite there being entities listed on the report and shows the numbers. Has anyone faced similar issue,...
Hello Team, I wanted to customise the existing state models of Compliance case as follows NewTriageInvestigateInvestigate- InvestigatorResolvePost case reviewClose Archived
Hi Everyone,I need some help with restricting Control record access for first line of defense users in ServiceNow GRC.In the Control table we have an Entity reference field profile which points to the Entity table [sn_grc_profile] Each Entity has an ...
Dear Team, I am creating a Risk Assessment Methodology with the assess type set to 'Assess - Risk' and have added the entity class as Company. However, for the assess type 'Risk', there is no option to add a Reassessment Frequency. Upon checking, I f...
My task is to add a field from the Issue Triage to the Issue record, now I know that I can use Business Rules for this one; but I was wondering what actually triggers the creation of the Issue record once you complete the Issue Triage?
Hi Everyone,I have around 2 years of experience in ServiceNow ITSM and recently started working on ServiceNow GRC / IRM. I have completed the Now Learning training for GRC.I am now looking to practice real-world GRC scenarios, such as:Risk Management...
Hi everyone,I'm working with Risk Management (IRM) in ServiceNow Yokohama and I'm trying to understand the correct behavior of Risk assessments. I have configured a Risk Statement with an Assessment (metric-based questionnaire). In this case, when I ...
Hi everyone,I'm working on a ServiceNow GRC implementation and discovered a potential permission scoping issue that I wanted to flag with you all.Issue:Users assigned the sn_grc.admin role appear to have access to script editor functionality for UI A...
